New post on OAuth testing.